CVE-2016-6424

Published on: 10/06/2016 12:00:00 AM UTC

Last Modified on: 03/23/2021 11:27:11 PM UTC

CVE-2016-6424

Source: Mitre
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Certain versions of Adaptive Security Appliance Software from Cisco contain the following vulnerability:

The DHCP Relay implementation in Cisco Adaptive Security Appliance (ASA) Software 8.4.7.29 and 9.1.7.4 allows remote attackers to cause a denial of service (interface wedge) via a crafted rate of DHCP packet transmission, aka Bug ID CSCuy66942.

  • CVE-2016-6424 has been assigned by [email protected] to track the vulnerability - currently rated as MEDIUM severity.

CVSS3 Score: 6.5 - MEDIUM

Attack
Vector ⓘ		 Attack
Complexity		 Privileges
Required		 User
Interaction
ADJACENT_NETWORK LOW NONE NONE
Scope Confidentiality
Impact		 Integrity
Impact		 Availability
Impact
UNCHANGED NONE NONE HIGH

CVSS2 Score: 6.1 - MEDIUM

Access
Vector ⓘ		 Access
Complexity		 Authentication
ADJACENT_NETWORK LOW NONE
Confidentiality
Impact		 Integrity
Impact		 Availability
Impact
NONE NONE COMPLETE

CVE References

Description Tags ⓘ Link
Cisco ASA Software CVE-2016-6424 Denial of Service Vulnerability Third Party Advisory
VDB Entry
cve.report (archive)
text/html
 URL Logo BID 93408
Cisco ASA DHCP Relay Resource Handling Flaw Lets Remote Users Deny Service - SecurityTracker Third Party Advisory
VDB Entry
www.securitytracker.com
text/html
 URL Logo SECTRACK 1036961
Cisco ASA Software DHCP Relay Denial of Service Vulnerability Vendor Advisory
tools.cisco.com
text/html
 URL Logo CISCO 20161005 Cisco ASA Software DHCP Relay Denial of Service Vulnerability
By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].

Known Affected Configurations (CPE V2.3)

Type Vendor Product Version Update Edition Language
ApplicationCiscoAdaptive Security Appliance Software8.4.7.29AllAllAll
ApplicationCiscoAdaptive Security Appliance Software9.1\(7\)4AllAllAll
ApplicationCiscoAdaptive Security Appliance Software8.4.7.29AllAllAll
ApplicationCiscoAdaptive Security Appliance Software9.1\(7\)4AllAllAll
  • cpe:2.3:a:cisco:adaptive_security_appliance_software:8.4.7.29:*:*:*:*:*:*:*:
  • cpe:2.3:a:cisco:adaptive_security_appliance_software:9.1\(7\)4:*:*:*:*:*:*:*:
  • cpe:2.3:a:cisco:adaptive_security_appliance_software:8.4.7.29:*:*:*:*:*:*:*:
  • cpe:2.3:a:cisco:adaptive_security_appliance_software:9.1\(7\)4:*:*:*:*:*:*:*: